-

Sun, 26 May 2024 12:11:47 +0200

Hubzilla Support Forum

adminsforum@hubzilla.org

hosh wrote the following post Sun, 26 May 2024 12:11:47 +0200

webdav seems only to work when multi-factor authentication is turned off.
(Attempted from MS Windows)

security webdav

show all 5 comments

Mon, 27 May 2024 12:56:11 +0200 last edited: Mon, 27 May 2024 12:56:29 +0200

hosh

hosh@hub.vikshepa.com

Has anyone else found this to be true? I don't think there is an objective reason. For example, I have 2FA to access Fastmail and use WebDav for my file storage there.

Mon, 27 May 2024 14:08:09 +0200

Harald Eilertsen

harald@hub.volse.no

@hosh This is a result of how authentication is handled in Hubzilla. If you are authenticated and have enabled mfa, but have not yet verified the mfa code, you will be asked to provide it regardless of which module you're trying to access.

As the DAV-stuff is a module, I think this is what causes the trouble.

It's easy enough to just make an exception for the DAV module though, but I haven't gone through to see if there's any potential security implications of doing that yet.

Interestingly enough, the DAV module also does it's own authentication (after the normal Hubzilla auth code has run). Not entirely sure hos/if these play together yet.

Mon, 27 May 2024 17:49:46 +0200

Harald Eilertsen

harald@hub.volse.no

@hosh Just submitted a merge request that I think will fix this issue if accepted.

Mon, 27 May 2024 20:04:52 +0200

hosh

hosh@hub.vikshepa.com

Very good! Hope that solves it.

Tue, 28 May 2024 20:06:13 +0200

Harald Eilertsen

harald@hub.volse.no

@hosh Seems to work fine on my local test server at least :)